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Amendments to the Specification ; 

Please replace the paragraph beginning at page 5, line 26 with the following amended 
paragraph: 

[0035] With reference to fig 2, a request is received by the server in step SI, resulting in 
the generation of a result in step S2, i.e. a number of selected rows from one or several table 
columns. The software component 12 determines (step S3) if any items in the result are marked 
for monitoring in the database. If no marked items are included in the result, the result is 
communicated to the user in a standard way (step S4). If, however, mared marked items are 
included in the result, the intrusion detection component 13 stores the query result, or at least 
those parts referring to the marked items, in the record 14, and the program control initiates the 
intrusion detection (step S6-S10). 


